Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc2fa864-1969-4048-b561-92b52f1412a4.roa
File:                     dc2fa864-1969-4048-b561-92b52f1412a4.roa (raw, json)
Hash identifier:          BqAVzzWC66ZWdtHYXQf/ksW99r7IXNK6vuVWXR116Fw=
Subject key identifier:   C5:BD:2C:7B:E7:58:F9:92:5D:22:EC:01:16:35:AA:6D:4C:91:67:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       231137F7C34550966EFD9B522637AA98EB3F869F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc2fa864-1969-4048-b561-92b52f1412a4.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        57.94.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:11:37:f7:c3:45:50:96:6e:fd:9b:52:26:37:aa:98:eb:3f:86:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=258309a35b0115c98f69505f0b34d3c919416988a8b527664b0d93a65f823871, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:7c:20:b4:cd:da:be:b0:7d:6c:e8:75:dd:
                    59:8a:de:72:25:c4:e1:fe:f6:81:c3:d8:03:17:a4:
                    9d:15:8c:24:c3:ab:0f:02:90:1e:f9:54:06:79:fa:
                    f7:c3:68:82:31:74:55:d7:22:e8:5b:d5:0e:0d:d9:
                    68:77:fc:33:77:7b:8c:d5:e7:cb:55:7a:97:cd:a7:
                    cc:a0:9a:e1:88:6b:7d:ff:4e:e6:11:87:0a:18:28:
                    b5:3b:86:c1:84:ab:16:f0:1a:90:f1:cf:26:14:3a:
                    e1:50:1a:ad:a3:8b:5f:a0:69:79:cb:bd:78:dd:bb:
                    e7:94:54:8d:75:26:43:56:f3:73:50:89:d8:ec:88:
                    c4:16:72:0e:51:84:28:5b:3f:72:5b:66:84:be:8a:
                    09:43:fb:49:09:ac:e3:17:86:93:bd:e8:98:79:b7:
                    1f:1a:b4:91:b2:05:3b:7d:88:dd:ef:3c:22:49:77:
                    e2:ca:33:25:99:94:42:57:23:68:c2:a7:e3:47:27:
                    8e:d5:15:dc:d2:ad:d1:b5:ba:ca:88:de:60:9c:40:
                    bc:df:fa:bf:c1:d1:b3:70:88:a8:0c:28:0b:17:1e:
                    53:72:7d:79:e6:4d:0b:38:10:25:83:74:32:18:67:
                    42:16:85:1d:ce:97:5b:88:7a:30:c5:64:3d:a6:58:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BD:2C:7B:E7:58:F9:92:5D:22:EC:01:16:35:AA:6D:4C:91:67:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc2fa864-1969-4048-b561-92b52f1412a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.94.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:30:6f:f9:ab:cc:9b:d5:60:32:29:c5:bf:2d:d0:2a:20:b6:
         a0:aa:f7:7d:b6:eb:9b:89:ec:50:f8:d9:20:7f:c7:fc:20:9e:
         a8:06:6e:4d:de:66:93:84:9f:0c:9f:68:11:69:69:71:32:f5:
         0a:88:78:dd:fc:52:e3:98:33:b7:4f:24:b3:16:ff:1c:64:df:
         9c:93:36:33:7c:ee:58:6c:b4:1f:d4:a9:ac:bd:7e:8f:ca:e0:
         81:97:f6:75:2b:38:7a:e5:0a:6c:e5:e0:c2:34:7c:f3:44:81:
         ce:36:1c:af:2d:53:c6:7c:4b:1d:72:37:fc:e7:2b:67:e8:1f:
         80:c8:6b:77:7a:c3:05:1e:84:dc:7a:86:a9:be:34:6b:4f:74:
         90:df:6c:18:f4:e6:0e:87:13:09:e5:2a:6e:3a:89:4d:71:a6:
         0c:0a:dd:b8:e3:1e:ad:08:08:05:fe:52:87:db:63:84:24:6d:
         84:2c:9b:be:e7:a3:38:aa:1d:a8:77:5e:cd:25:89:11:a8:ee:
         c2:f4:8d:80:f1:71:7b:08:88:82:aa:19:93:e5:4b:49:10:06:
         33:71:02:f9:03:a7:1f:42:2f:87:a8:09:54:b9:31:c6:6b:59:
         7d:37:a2:5a:cf:1e:67:84:c5:84:0a:ae:05:8a:65:5c:c1:e9:
         aa:1a:e7:99
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUIxE398NFUJZu/ZtSJjeqmOs/hp8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTgzMDlhMzViMDExNWM5OGY2OTUwNWYwYjM0ZDNjOTE5
NDE2OTg4YThiNTI3NjY0YjBkOTNhNjVmODIzODcxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUL3wgtM3avrB9bOh13VmK3nIlxOH+9oHD2AMXpJ0VjCTD
qw8CkB75VAZ5+vfDaIIxdFXXIuhb1Q4N2Wh3/DN3e4zV58tVepfNp8ygmuGIa33/
TuYRhwoYKLU7hsGEqxbwGpDxzyYUOuFQGq2ji1+gaXnLvXjdu+eUVI11JkNW83NQ
idjsiMQWcg5RhChbP3JbZoS+iglD+0kJrOMXhpO96Jh5tx8atJGyBTt9iN3vPCJJ
d+LKMyWZlEJXI2jCp+NHJ47VFdzSrdG1usqI3mCcQLzf+r/B0bNwiKgMKAsXHlNy
fXnmTQs4ECWDdDIYZ0IWhR3Ol1uIejDFZD2mWKO/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUxb0se+dY+ZJdIuwBFjWqbUyRZyIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RjMmZhODY0LTE5NjktNDA0OC1iNTYxLTkyYjUyZjE0MTJhNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA5XjANBgkqhkiG9w0BAQsFAAOCAQEAIDBv+avMm9VgMinFvy3QKiC2oKr3
fbbrm4nsUPjZIH/H/CCeqAZuTd5mk4SfDJ9oEWlpcTL1Coh43fxS45gzt08ksxb/
HGTfnJM2M3zuWGy0H9SprL1+j8rggZf2dSs4euUKbOXgwjR880SBzjYcry1TxnxL
HXI3/OcrZ+gfgMhrd3rDBR6E3HqGqb40a090kN9sGPTmDocTCeUqbjqJTXGmDArd
uOMerQgIBf5Sh9tjhCRthCybvuejOKodqHdezSWJEajuwvSNgPFxewiIgqoZk+VL
SRAGM3EC+QOnH0Ivh6gJVLkxxmtZfTeiWs8eZ4TFhAquBYplXMHpqhrnmQ==
-----END CERTIFICATE-----